miniflux: update to 2.3.0.
Security
Only discoverable WebAuthn credentials (resident keys / passkeys) are supported for login.
Non-resident credentials can no longer be used for first-factor authentication to prevent username enumeration before password verification. They are intended for post-password MFA flows, which Miniflux does not currently support.
Persist WebAuthn backup eligibility/state and validated credential state after login.
Require POST requests for logout, feed refresh, and OAuth2 unlink actions.
Apply CSRF protection to all non-safe HTTP methods.
Add http.CrossOriginProtection middleware for the web UI.
Validate redirect URL schemes in HTMLRedirect to prevent unsafe redirects.
Restore URL scheme validation in templates for untrusted feed URLs.
Sanitize filenames in Content-Disposition headers to prevent header injection.
Reject empty OAuth2 state parameters when no authentication flow is in progress.
Allow configured private proxies while still enforcing private-network restrictions for direct requests and redirects.
Validate URI schemes case-insensitively according to RFC 3986.
Pin third-party GitHub Actions to immutable commit SHAs to reduce supply-chain risks.
Cap the maximum entry limit to 1000 across the UI, API, and storage layer.
[41 lines not shown]
meta-pkgs/bulk-test-doxygen: import bulk-test-doxygen-20260517
Meta-package for testing doxygen updates.
Do not forget to turn on the 'doxygen' option when testing this.
py-typeguard: updated to 4.5.2
4.5.2
- Fixed ``IndexError`` raised from ``check_signature_compatible`` when the subject
method has no positional parameters
py-tifffile: updated to 2026.5.15
2026.5.15
- Update ZarrFileSequenceStore to zarr format 3 (breaking).
- Derive ZarrFileSequenceStore dimension names from FileSequence.dims.
- Add option to override dimension names in zarr stores.
- Add support for Python 3.15.
py-numpy: updated to 2.4.5
2.4.5
MAINT: Prepare 2.4.x for further development
TYP: fix ``np.shape`` assignability issue for python lists
ENH: Return rank 0 for empty matrices in matrix_rank
CI/BUG: add native jobs for s390x, fix bug in ``pack_inner``...
BUG: f2py map complex_long_double to NPY_CLONGDOUBLE
MAINT: f2py: Stop setting re._MAXCACHE to 50.
BUG: fix heap buffer overflow in timedelta to string casts
MAINT: Rename ppc64le and s390x workflow
BUG: Fix matvec/vecmat in-place aliasing (out=input produces...
TYP: ``tile``\ : accept numpy scalars and arrays as second argument...
DEP: Undo deprecation for np.dtype() signature used by old pickles...
REV: Manual revert of float16 svml use
TYP: ``ix_`` fix for boolean and non-1d input
BUG: incorrect temp elision for new-style (NEP 43) user-defined...
TYP: fix sliding_window_view axis parameter typing
[13 lines not shown]
paraview: Update to 6.1.0
6.1.0 (2026-03-31)
New features
Introducing ANARI rendering integration in ParaView
This change introduces ANARI rendering in ParaView and a dynamic
properties feature used to generate a user interface based on a JSON
properties description generated by each ANARI renderer.
The current integration uses a simple approach to delegate ray-traced
rendering to ANARI. The Properties panel presents you with a choice
between the original Enable Ray Tracing (with OSPRay) and Enable
Rendering with ANARI.
When that option is checked, the panel presents a list of options
dynamically generated for each renderer including:
* ANARI: Library: A choice between "visrtx", "helide", and
"environment". The last option uses the library set using the
[1104 lines not shown]
kicad-*: Update to 10.0.3
KiCad 10.0.3 (2026-05-15)
The 10.0.3 stable version contains critical bug fixes and other minor
improvements since the previous release.
A list of all of the fixed issues since the 10.0.3 release can be
found on the KiCad 10.0.3 milestone page.
KiCad 10.0.2 (2026-05-09)
The 10.0.2 stable version contains critical bug fixes and other minor
improvements since the previous release.
A list of all of the fixed issues since the 10.0.2 release can be
found on the KiCad 10.0.2 milestone page.
time/plan: update to 1.12
# changes (since 1.9)
====== 1.12 released 17.10.17 =======
FEATURES:
* feature by Ralf Paaschen: can page through months with PageUp, PageDown,
Home, and End keys
* the manpages reflect the Debian Linux paths.
* the "make linux" Makefile target is now 64 bits; use "make linux32" for
32 bits. Just "make" is still equivalent to "make debian".
====== 1.11 released 4.3.14 =======
BUG FIXES:
* Petter Reinholdtsen
- make the -L option of pland the default on Debian, considered safer
[79 lines not shown]
